Advisories · Technology
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa").
Every CVE that names AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.0 Medium
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), p…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 9005 Series Processors
- CWE-1262
- CVSS 5.7 Medium
Protection mechanism failure in AMD EPYC™ Series 9004 Processors and others
- AMD EPYC™ Series 9004 Processors
- AMD EPYC™Series 4004 Processors
- CWE-693
- CVSS 8.5 High
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code executio…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 9005 Series Processors
- CWE-1233
- CVSS 5.9 Medium
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1233
- CVSS 4.6 Medium
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or int…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 9005 Series Processors
- Memory corruption
- CVSS 4.0 Medium
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1220
- CVSS 1.8 Low
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-665
- CVSS 6.9 Medium
Improper access control in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Broken access control
- CVSS 7.1 High
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1274
- CVSS 6.7 Medium
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1231
- CVSS 5.3 Medium
Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 9005 Series Processors
- CWE-459